Parsing xml message inside json file

Elastic Stack Logstash
1

Hello,

I am getting an error while filtering a json file. Previously, I was using filebeat to send data directly to logstash, but now I am using kafka between filebeat and logstash. So the output is not the same:

Previously, the input of my logstash was a part of an xml.

Example:kibana

And now I am getting a json file:
json_kibana

inside this json file, I can find the part of xml I was using before (message in yellow)

How can I change this part of my logstash to will be able to filter the xml file like I was doing before.

the first part of my filter was:
old_logstash

I tried to use something like that but I am getting errors:

logstash
logstash.PNG1271×405 11.3 KB

Thank you for your help

2

What error are you getting? Also, please do not post pictures of text, just post the text.

3

I am getting this error:

[WARN ][logstash.filters.split   ] Only String and Array types are splittable. field:[theXML][measType] is of type = NilClass
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.